RidgeBOT Brings

Affordable Pen Tests

to Your Organization
RidgeBOT
Enterprise-Class Automated Penetration Testing
Using Intelligent Validation Robots

Latest Hacking Agentless

Techniques
Automated Both Hosts & Web Apps

Automated
Dynamic
Scaling

Engineered
for Enterprise
Environments

Prioritized
Remediation

Alerts
Harmless
Exploits Visibility
of Attack
Vectors
 RidgeBOT automates the entire ethical hacking process

100x faster than a human tester

RidgeSecurity is changing the game with RidgeBOT, an intelligent security validation robot.
Equipped with state-of-the-art hacking techniques, RidgeBOT has a collective knowledge
of threats, vulnerabilities, and exploits. Acting like an actual ethical attacker, RidgeBOT
relentlessly locates, and documents exploits. Automating penetration testing makes it
affordable with the ability to run at scale. Working within a defined scope, RidgeBOT
instantly replicates to address highly complex structures.
RidgeSecurity enables enterprises and web application teams, DevOps, ISVs, govern-
ments, healthcare, education—anyone responsible for ensuring software security—to
affordably and efficiently test their systems.

Challenges
Most organizations utilize security testing (a.k.a penetra- happens. Proper penetration testing helps organizations
tion testing) to validate the security posture of their address issues in a more manageable and cost-effective
network and systems. In such a test, security testers take manner.
on the role of a hacker and try to break into the organiza- However, attackers are always developing new exploits
tion’s IT environment to find vulnerabilities and determine and attack methods, often using machine learning (ML) to
how they exploit a real-world hacker attack. The underly- launch attacks automatically. Enterprises’ security teams
ing idea is that a good security test should reveal how an and professional “penetration testers” are under tremen-
attacker could infiltrate an organization’s systems before it dous pressure to keep up.

RidgeBOT’s Solution and Key Benefit

RidgeBOT provides automated security validation services. It assists security • Improve security test coverage and
efficiency
testers in overcoming knowledge and experience limitations and always
• Reduce the cost of security validation
performs at a consistent top-level. The shift from manual-based, labor-intensive
• Continuously protect the IT
testing to machine-assisted automation alleviates the current severe shortage
environment
of security professionals. It allows human security experts to let go of daily
• Produce actionable and reliable results
labor-intensive work and devote more energy to the research of new threats and for different stakeholders
new technologies.

RidgeBOT brings automated penetration testing

within reach of every organization.
RidgeBOT Key Functions
In a given task, RidgeBOT automates the entire ethical Asset Discovery—Based on smart crawl techniques and
hacking process. When it connects to an organization’s IT fingerprint algorithms, discover broad types of IT assets: IPs,
domains, hosts, OS, apps, websites, plugins, and network
environment, RidgeBOT automatically discovers all different devices.
types of assets on the network and then utilizes the collec-
Vulnerability Mining—Utilizing proprietary scanning
tive knowledge database of vulnerabilities to mine the target tools, our rich knowledge base of vulnerabilities and security
system. Once RidgeBOT identifies vulnerabilities, it uses breach events, plus various risk modeling.
built-in hacking techniques and exploits libraries to launch Vulnerability Exploit—Use a smart sandbox to simulate
an actual ethical attack against the vulnerability. If successful, real-world attacks with toolkits. Collect more data for a
further attack in a post-breach stage.
the vulnerability is validated, and the entire kill-chain transac-
tion is documented. Risk Prioritization—Automatically form an analytic view,
visualize a kill chain, and display a hacker’s script. Show
RidgeBOT provides rich analytics for risk assessment and hacking results like data and escalated privileges from the
prioritization, exporting a comprehensive report with remedi- compromised objects.

ation advice, giving tools for patch verification.

Higher Precision and More Discoveries with AI Brain

RidgeBOT has a powerful “brain” that contains artificial intelligence algorithms and an expert knowledge base that
guides RidgeBOT in attack pathfinding/selection. It launches iterative attacks based on learnings along the path,
achieving more comprehensive test coverage and deeper inspection.

Global Intelligence Security Global Service

Network Knowledge Network

Response Knowledge
Output

Data
Request Feedback

RidgeIntelligence Artificial RidgeBOT

RidgeIntelligence Threat Intelligence Intelligence Service
Platform Engine Platform

Threat Attack Event Vulnerability 3rd Party POC Exploit Fingerprint Privilege Escalation DNS Global URL
Intelligence 2B 100M 108K Vulnerability 12K 6000 Rule 3500 Vulnerability 1000 Database Database

Two Deployment Scenarios

On-Premise Model VPN-Based Service

For enterprise environment—deploy RidgeBOT to bare metal For ad hoc penetration testing, our VPN-based services are
or virtual servers within your environment. This configuration ideal. Contact RidgeSecurity, or an Authorized RidgeBOT
provides the highest performance at the lowest TOC. MSSP to learn more about the VPN-based service.
On-Premise System Requirements
For On-Premise deployment, Our RidgeBOT solution is a software package deployed on specified bare metal servers or
virtual machines. The RidgeBOT software package includes the RidgeIntelligence platform, the RidgeBrain engine, and
RidgeBOT plugins. Software upgrades are provided through professional services. We recommend on-premise deploy-
ment for organizations to have complete control over test procedures, findings, and sensitive data involved.

Bare Metal Server Deployments Essential Advanced

Minimum Hardware Requirement • Intel Xeon CPU with a minimum of 4 cores • Dual Intel Xeon CPUs with a minimum of
• 32 GB RAM 6 cores each
• 1TB Enterprise hard drive • 64 GB RAM
• 2 Ethernet interfaces • 2 X 4TB Enterprise hard drive with RAID
controller (RAID 1)
• 2 Ethernet interfaces

Reference Platforms Dell PowerEdge, Lenovo ThinkSystem, HP ProLiant and more

Concurrent Bots 16 32

Virtual Machine Deployments Demonstration/Lab Production

Minimum Hardware Requirement • 8 vCPU • 8 vCPU
• 16 GB RAM • 32 GB RAM
• 100 GB Storage • 100 GB Storage
• 2 Ethernet interfaces • 2 Ethernet interfaces

Concurrent Bots 8 16

Supported Hypervisors • VMware Workstation 15 Pro or higher

• VMware Fusion 11 Pro or higher
• VMware ESXi 5.0 or higher
• Oracle VirtualBox 6.0 or higher

About RidgeSecurity
RidgeSecurity is transforming Security Validation with RidgeBOT, an Intelligent Security Validation Robot. RidgeBOT’s are
modeled using techniques utilized by literally millions of hackers that penetrate systems. When deployed within a system,
RidgeBOT’s are relentless in their quest to locate, exploit, and document their findings. They work within a defined scope
and instantly replicate to address highly complex structures. RidgeSecurity enables enterprise and web application
teams, ISVs, DevOps, governments, education, anyone responsible for ensuring software security to affordably and
efficiently test their systems.

Contact RidgeSecurity to learn more.

[email protected] RidgeSecurity.ai/contact-us

@RidgeSecurityAI
Ridge Security Technology Inc.
www.ridgesecurity.ai Linkedin.com/company/37183366/admin/

© 2020 All Rights Reserved Ridge Security Technology Inc. RidgeBOT is a trademark of Ridge Security Technology Inc.